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1-4, Jul. 1995. 

Ari Luotonen et al . , Caching Algorithm of CERN httpd, http://www.w3.org/archives/, 
pp. 1-4, Dec. 1994. 

Duane Wessels, Intelligent Caching for World Wide Web Objects, 
http: //www/isoc.org/, pp. 1-15, May 1995. 

Evangelos P. Markatos et al., A Top-10 Approach to Prefetching on the Web, 
http://www.ics.forth.gr/proj/, pp. 1-15, Aug. 1996. 

Pillip M. Hallam-Baker, Notification for Proxy Caches, http://www.w3.org/pub/, pp. 
1-5, Feb. 1996. 

Chris Dodge et al . , Web cataloguing through cache exploitation and steps toward 
consistency maintenance. Computer Networks and ISDN Systems, pp. 1003-1008, Dec. 
1995. 

Thomas T. Kwan et al., NCSA* s World Wide Web Server: Design and Performance, IEEE, 
pp. 68-74, Dec. 1995. 

"A Structure For Transportable, Dynamic Multimedia Documents", Dick C.A. Bulterman, 
Proceedings of the Summer 1991 USENIX Conference Jun . 10-14, 1991, pp. iii-vi and 



http://westbrs:9000/bin/gate.exe?f^doc&state=35e0t6.10.6&ESNAME=FRO&p_Mess 



8/21/04 



137-155, Nashville, 

"An Interchange Standard And System For Browsing Digital Documents", Andrew 
Jonathan Kass, pp. Cover page. Abstract page & pp. 5-105, Massachusetts Institute 
of Technology, 1995. 

"PointCast To Team With Microsoft, Add New Net Dimension", George Avalos, Contra 
Costa Times, 2 pp.., Dec. 12, 1996. 

"Microsoft Picks On-Line News From PointCast", David Bank, 1 pg.. The Wall Street 
Journal Marketplace, Dec. 12, 1996. 

"Microsoft To Expand Its Internet Reach", 1 pg./ Los Angeles Times, Dec. 12, 1996. 
The ISI Experimental Multimedia Mail System, Jonathan B. Postel, et al . , ISI 
Research Report, Sep. 1986, pp. 1-27. 

"An Interpersonal Multimedia Visualization System", Richard L. Philips, Los Alamos 
National Laboratory, IEEE Computer Graphics & Applications, pp. 20-27, May 1991. 
"Architectures For Personalized Multimedia", Srinivas Ramanathan, et al . , 
University of California at San Diego, Spring, 1994 IEEE pp. 37-46. 
"Pushing the Envelope on delivery of Customized Internet", New York Times, 2 pp., 
Laurence Zuckerman, Dec. 9, 1996. 

"SIFT A Tool For Wide-Area Information Dissemination, "Tak W. Yan, et al . , pp. 177- 
186, 1995 USENIX Technical Conference, Jan. 16-20, 1995. 

"The RightPages Image-Based Electronic Library For Alerting And Browsing", pp. 17- 
26, Guy A. Story, et al . , AT&T Bell Laboratories, Sep. 1992. 

"Two Free Programs Deliver News To Your PC", 1 pg., Gabrielle Mitchell, PC World 
Aug. 1996. 

"A Need-To-Know Basis", 1 pg., WebMaster, Oct. 1996. 

"Microsoft Cuts Deals With 2 Firms", San Jose Mercury News, 1 pg. , Dec. 12, 1996. 
"Microsoft Unites With PointCast at Trade Show", The San Francisco Chronicle, Jean 
Sheartz, 1 pg., Dec. 12, 1996. 

"Microsoft And PointCast In Broadcast Alliance", The New York Times, Laurence 
Zuckerman, 1 pg., Dec. 12, 1996. 

"Big Business at Businesswire . Com" , Christopher Elliott, Web Techniques, Dec. 1996, 
pp. 95-99. 

"Microsoft Teams With PointCast", The Globe And Mail, Patrick Bretmour, 1 pg., Dec. 
12, 1996. 

"Journalist. TM. , Your Personalized Newspaper for CompuServe", PED Software 
Corporation, pp. 1-143. 

"Synchronization of Multimedia Data For A Multimedia News-On-Demand Application", 
Louise Lamont, et al . , IEEE Journal on Selected areas in Communications, pp. 164- 
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"MediaView A General Multimedia Digital Publication System", Richard L. Phillips, 
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12, No. 17, p. 29. 
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ART-UNIT: 278 

PRIMARY-EXAMINER: Maung; Zarni 
ASSISTANT-EXAMINER: Winder; Patrice L. 

ATTY-AGENT-FIRM: Blakley, Sokoloff, Taylor & Zafman LLP 



An improved method and apparatus is used for storing and delivering information 
over the Internet and using Internet technologies. According to one embodiment of 
the present invention, a method and apparatus for maintaining statistics on a 
server is disclosed. According to an alternative embodiment, a method and apparatus 
is disclosed for predicting data that a client device may request from a server on 
a network. In another embodiment of the present invention, a method and apparatus 
is disclosed for managing bandwidth between a client device and a network. 
According to yet another embodiment, a method and apparatus is disclosed for 
validating a collection of data. According to yet another embodiment, a method for 
providing notification to clients from servers is disclosed. 

5 Claims, 10 Drawing figures 
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TITLE: Method and apparatus for storing and delivering documents on the internet 

Application Filing Date (1) : 
19970721 

Detailed Description Text (59) : 

The TOG catalog also contains access control and authentication information. The 
authentication data enables the back-e nd serve r to verify the identity of 
administrators wishing to manage the Td'^p^i^^^^ Pglitgayli©:^ gjlT back-end server uses 
the access control information to restrict parti^cular^administration functions to 
various groups of people. 

Detailed Description Text (106) : 

This configuration mechanism is simple and powerful. It allows intranet 
administrators to configure their clients without any installation-time v-ork by the 
user. Because the configuration data is received in the form of a subscription 
notification, clients will receive any configuration changes as soon as they are 
made. If multicast notification is used, only one copy of the new configuration is 
sent to all clients. The mechanism is reasonably secure because the configuration 
host name is well-known within the client's local internet domain, and the client 
initiates contact with the configuration publisher. Additional security can be 
implemented with Secure HTTP and digital signatures to authenticate the publishing 
host . 
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International Journal of Bio-Medical Computing, vol. 35, pp. 147-151, Feb. 1994, 
Gunnar O. Klein, "Smart Cards-A Security Tool For Health Information Systems". 
Advances In Cryptology-AUS CRYPT *90, International Conference on Cryptology, pp. 
46-57, Jan. 8-11, 1990, P.J. Lee, "Secure User Access Control for Public networks". 

Utlandsrapport Fran Sveriges Tekniska Attacheer, pp. 54-62, Lena Sandh, "NYA 
Franska Kort Tillaempningar AV IC-KORT". 

ART-UNIT: 2153 

PRIMARY-EXAMINER: Johns; Andrew W. 
ASSISTANT-EXAMINER: Le; Hiev C. 

ATTY-AGENT-FIRM: Obion, Spivak, McClelland, Maier & Neustadt, P.C. 



A system for administering certificates involves the generation, distribution and 
recall of certificates for public key systems. The generation comprises generating 
encryption keys and personalizing smart cards. The system is designed as a 
distributed system and is divided into a central unit with one or more associated 
terminal units. Each terminal and center is allocated unique certified identities. 
Mutual checking of access rights and data contents is carried out between the 
central unit and each terminal unit. An issued certificate can be traced back to 
the individual responsible for the issuing, compatibility with standards being seen 
to exist. Personalization of cards is integrated in each terminal. 

20 Claims, 11 Drawing figures 
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2002 



DOCUMENT-IDENTIFIER: US 6490367 Bl 

TITLE: Arrangement and method for a system for administering certificates 



Application Filing Date (1) : 
19961004 

Brief Summary Text (5) : 

A method which establishes more secure identification is that of digital 
signatures, which method can be applied in all the areas where an identification of 
the source of an operation or a document needs to be verified. This method 
simulates the normal manner of identification which is used for transactions 
outside thei electronics field. The method using digital signatures is based on the 
party who is to be identified signing for the transaction (compare ordinary 
signature on, for example, a contract) and the identity being checked against a 
comparison original which has the same role as an ID card has for ordinary 
signatures . For this method to be able to function in an electronics context, an 
infrastructure needs to be available in order to be able to create electronic 
identity documents. 

Brief Summary Text (23) : 

1. A pair of cipher keys unique to the CA, one public and one private, the private 
one being used for the digital signature which guarantees the identity of the 
issuer and that the contents of. the certificate are not manipulated. The private 
key must be stored in such a way that unauthorized access is not possible in 
practice . 

Detailed Description Text (23) : 

C*ommunication with CA terminals. The CA centre communicates with several different 
CA terminals. Since it will be possible for this to take place on completely 
unprotected lines, the CA centre itself must secure the communication. This is done 
by means of full authentication, sequence numbers and digital signatures . If the 
private key is generated in the CA centre, it is necessary to encrypt the 
communication . 

Detailed Description Text (34) : 

Communication with the CA centre. The CA terminal will communicate with the CA 
centre. Since it will be possible for this to take place on completely unprotected 
lines, the CA terminal must itself secure the communication. This is done by means 
of full authentication, sequence numbers and digital signatures . If the private key 
is generated in the CA centre, it is necessary to encrypt the communication. 

Detailed Description Text (117) : 

FIG. 1 1 CERTIFICATE 2 Uppsala County Administration 3 valid from 4 valid to 5 Lena 
Andersson's public key 6 Digital signature generated by issuer 7 Plastic covering, 
appearance =recognition 



1. A method of issuing certificates having a unique digital signature identifying a 
certification authority responsible for the issuing- comprising; providing a 
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distributed system divided into a central unit and one or more associated terminal 
unit; providing each associated terminal unit and the central unit with unique 
identities; processing certificates as authorized by a certification authority at 
one of the associated terminal units or the central unit by mutual checking of 
access rights and data contents between the central unit and each associated 
terminal unit; and issuing each certificate so that it has encoded therein access 
authority for the certificate user designated along with a unique digital signature 
identifying the certification authority responsible for issuing the certificate. 

4. The system according to claim 2, wherein the certification authority publishes 
revocation lists terminating previously issued certificates and wherein the 
certification authority is made up of different certificate issuers, each 
certificate issuer having a unique digital signature and being certified by a 
higher ranking authority and each certificate issuer being able to certify other 
lower ranking certificate issuers. 

11. The system according to claim 2, wherein the central unit includes the 
certification authority provided as one or more certification authority 
administrator terminals having private keys providing a system-unique certification 
authority administrator terminal identity as the unique digital signature . 

12. The system according to claim 2, wherein each associated terminal unit includes 
a certification authority administrator acting as the certification authority with 
a system-unique identity functioning as the unique digital signature . 

13. The system according to claim 2, further including an internal catalogue 
configured to store system-internal certificate information relative to 
certification authority administrators acting as the certification authority 
issuing certificates at the request of one or more organization units, where each 
certification authority administrator has a unique identity and this is stored in 
each certificate which is created by the certification authority administrator as 
the unique digital signature . 

16. The system according to claim 2, wherein each associated terminal unit includes 
means for authenticating a certification authority administrator as the 
certification authority, means for handling input data, means for checking the 
plausibility of the input data, means for creating part of the certificate 
contents, means for authenticating, the central unit, means for communicating with 
the central unit, means for verifying certificates, means for checking the 
certificate contents, means for personalizing the certificates for individual 
users, means for updating external catalogues, means for creating revocation 
messages to terminate issued certificates, means for handling revocation 
confirmations, means for opening any blocked certificate, and means for updating 
certificates . 

19. The system according to claim 3, wherein the certificate authority publishes 
revocation lists terminating previously issued certificates and wherein the 
certificate authority is made up of different certificate issuers, each certificate 
issuer having a different unique digital signature and being certified by a higher 
ranking authority and each certificate issuer being able to certify other lower 
ranking certificate issuers. 
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